www.collaborationassociates.ca.livepages.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:c6:9f:b8:1e:4f:5a:f3:58:05:95:3e:f8:35:9a:f6:b7:76 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.collaborationassociates.ca.livepages.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:c6:9f:b8:1e:4f:5a:f3:58:05:95:3e:f8:35:9a:f6:b7:76
Serial Number (int): 328925069694337788521401547031146088806262
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:8d:09:af:e8:84:6e:cb:85:2b:42:cb:f3:f9:cd:10:cf:26:f5:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:5e:cc:f3:ae:3a:c4:ca:16:ab:35:de:dd:21:3c:8c:ac:a6:36:17
Fingerprint (sha256): 5c:f5:57:d6:15:0e:f0:5a:5d:24:d1:86:d6:26:9e:e6:5e:4b:aa:bb:05:05:57:04:7e:24:8b:ff:3e:64:0e:80

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.collaborationassociates.ca.livepages.ca

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.collaborationassociates.ca.livepages.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ca.livepages.ca
*.livepages.ca
collaborationassociates.ca
www.collaborationassociates.ca
www.collaborationassociates.ca.livepages.ca
www.docs.livepages.ca
www.kyrisma.livepages.ca
www.outsourceapm.livepages.ca
www.sprintzero.livepages.ca
www.villagefeeds.livepages.ca

Other certificates including the domain name livepages.ca

(limited to 100 certificates)
alphaplustech.livepages.ca
infonett.livepages.ca
likestotravel.livepages.ca
netcoach.ca
trendspire.ca
huddletables.livepages.ca
resourcenet.livepages.ca
creativepro.ca
livepages.ca
creativepro.ca
socialtable.livepages.ca
dianneclark.livepages.ca
creativepro.ca
alphaplustech.livepages.ca
netcoach.livepages.ca
likestotravel.livepages.ca
dianneclark.com
villagefeeds.livepages.ca
trendspire.io
digitaledventures.io
kyrisma.livepages.ca
secure.e-roleplay.com.livepages.ca
netcoach.ca
home.livepages.ca
edventures.io
resourcenet.livepages.ca
ageactive.ca
collaborationassociates.ca
boardroomexperts.com
sprintzero.io
alphaplustech.livepages.ca
ageactive.livepages.ca
trendspire.ca
digitaledventures.io
ageactive.ca
c3boards.com
likestotravel.livepages.ca
folkgarten.livepages.ca
trendspire.io
robbinstowing.com
folkgarten.livepages.ca
ageactive.livepages.ca
edventures.io
ageactive.ca
secure.e-roleplay.com.livepages.ca
livepages.ca
myedventures.livepages.ca
livepages.ca
boardroomexperts.com
kyrisma.livepages.ca
sprintzero.io
resourcenet.livepages.ca
creativepro.ca
kyrisma.livepages.ca
netcoach.livepages.ca
boardroomexperts.livepages.ca
kyrisma.livepages.ca
secure.livepages.ca
myedventures.livepages.ca
ageactive.livepages.ca
folkgarten.livepages.ca
cubitables.livepages.ca
kyrisma.com
vervenet.livepages.ca
likestotravel.livepages.ca
ageactive.ca
resourcenet.ca
ageactive.ca
netcoach.ca
villagefeeds.livepages.ca
home.livepages.ca
creativepro.ca
dianneclark.livepages.ca
folkgarten.livepages.ca
resourcenet.ca
livepages.ca
likestotravel.livepages.ca
infonett.ca
likestotravel.livepages.ca
netcoach.livepages.ca
netcoach.livepages.ca
ageactive.ca
secure.livepages.ca
trendspire.com
huddletables.livepages.ca
socialtable.livepages.ca
myedventures.livepages.ca
huddletables.com
vervenet.livepages.ca
livepages.ca
sprintzero.io
huddletables.livepages.ca
cart.livepages.ca
ageactive.ca
ageactive.ca
corporatecafe.livepages.ca
dianneclark.ca
creativepro.livepages.ca
secure.livepages.ca
villagefeeds.livepages.ca

Certificate

The complete raw certificate details for www.collaborationassociates.ca.livepages.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ur+5hLM6XmyjaKMYKog
IpS9UI9Tq+8MJEp8gI97eTdJ55F+bdObIzY8p5Q+KAArjSYwanZvcToeAshgLH73
/nP81ICuCbmbBsOjZjb96f7pC8A7H+/UrX5xTW7iVT0pkLUNS+q06Yg4agYNVGe5
5Ml1WjAg7u3NWsNmSAT151LTwnrHCjw4jqM1Scaulnj1sTU30oyYDsVBwrPsmz5s
grbnjK2Mzm+qgYY/Z1S4nGh6FjthUMTEB2hP2zQAATehUGKU0R2RgVto8sb7D+TL
TJti0NUCagLCwg+ZjrPev5YX/vB+orxiM0v61K6Nwmx+ed5nkmNoxnHOOhOopG72
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328925069694337788521401547031146088806262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 20:28:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-11 20:27:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.collaborationassociates.ca.livepages.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30665550499472793893551149234980048127998227039916909299761756950164558842862756016067092181385449568755505437278220172602514765429803833320004047952310387866511647009269518089208661399014401395203971629222620191907000933933581124573371260978456587980144132157257928411545931373137117848010917871431827671492618408904487787946296208351325335474020209977258229545928779162667748927509830171472087148354190674825941689695491648972092730196539483940576531777388131110377729225977006512752049945644930226623541651025302045327373067389650364343765247686069612400207171633215703215584404624798272877973332208468512117552791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e78d09afe8846ecb852b42cbf3f9cd10cf26f5f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (284 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca.livepages.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livepages.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborationassociates.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collaborationassociates.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collaborationassociates.ca.livepages.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docs.livepages.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kyrisma.livepages.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outsourceapm.livepages.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sprintzero.livepages.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villagefeeds.livepages.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f73daf44e0000040300473045022100e58b6e1018b9ba9b7e8c25d9a3cdc55347a0cddfbdbc066747f0543207d6813d022078231d036f0919456ca0016403a9c67f5216f5ec8f5badc5d0a51bd7b31a60a100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f73daf4a2000004030048304602210080c6e73836ac6b947354d693a2fcbd5e27be87ae701b73c7b36bc0cd808569ae022100d55cc7120773bdef955cee1a10b3998db598ca098b553faa4f915409f20f34ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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